LFI to RCE 취약점 수정

2017-02-06 20:00:18 +09:00
parent ce03af265e
commit ed957cf6b3
7 changed files with 51 additions and 10 deletions
--- a/bbs/qatail.php
+++ b/bbs/qatail.php
@ -7,7 +7,7 @@ if (G5_IS_MOBILE) {
    include_once('./_tail.php');
 } else {
    echo conv_content($qaconfig['qa_content_tail'], 1);
-    if($qaconfig['qa_include_tail'])
+    if(is_include_path_check($qaconfig['qa_include_tail']))
        @include ($qaconfig['qa_include_tail']);
    else
        include ('./_tail.php');